Cyber Security Manager

About the role

PwC South East Asia Consulting's Cybersecurity team offers clients an end-to-end portfolio of services across assess, build, manage and respond, covering Cyber Risk Strategy, Digital Identity & Access Management, Data Privacy & Protection and Cyber Defence & SOC Optimisation. As Cyber Security Manager you will design and implement cybersecurity and data protection frameworks and programs for clients, and act as a subject matter expert and interim team member.

Key responsibilities

• Design cybersecurity frameworks aligned with the client's business objectives, vision and operational plans
• Analyse data patterns and trends through metrics to drive operational excellence
• Design and implement data protection and privacy programs, evaluate client practices and conduct Privacy Impact Assessments
• Support strategic planning, technical roadmaps, security tool rationalisation and the design of the security organisation structure
• Develop security policies, procedures and standards, review them for control gaps and run security process implementation reviews
• Run cybersecurity diagnostic assessments, develop skill-development programs and advise on ISMS certification
• Help clients comply with national and international regulations such as the EU GDPR, and deploy tools to detect and prevent privacy breaches
• Support privacy incident response, bring together stakeholders (legal, compliance, risk, HR, security, business) and act as an interim team member (e.g. data protection officer, security officer)
• Identify opportunities for business and team growth

Required profile

• Bachelor's degree in Computer Science, Information Systems, Information Technology, Engineering or equivalent
• Minimum 4-5 years of relevant experience
• Knowledge of data protection and privacy laws such as PDPA, EU GDPR and Privacy Shield, and frameworks such as GAPP and BCRA
• Strong stakeholder management, communication and analytical skills

Required skills

• Experience with vulnerability scanning solutions and cybersecurity systems
• Certifications such as CIPM, CIPT, CIPP/E, CISM, CISSP or HCISSP, and membership in bodies such as IAPP, ISACA or (ISC)2